r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 490c003436e215e91596f285fcba92f5
0c4c9a5802e7cdb699f4918c252dbdf8431c25ec
9fe6beb1cb3851018168765a243b6de69ec71d30770f8c2dcc57cae7d9978cc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9FE6BEB1CB3851018168765A243B6DE69EC71D30770F8C2DCC57CAE7D9978CC1"
Last-Modified: Wed, 28 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8342
Expires: Thu, 29 Sep 2022 02:21:58 GMT
Date: Thu, 29 Sep 2022 00:02:56 GMT
Connection: keep-alive
thenewhealthinstitute.net/awbPromo103
301 Moved Permanently 707 B URL HTTP/1.1 thenewhealthinstitute.net/awbPromo103
IP
ASN #47583 Hostinger International Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Phishing
GET /awbPromo103 HTTP/1.1
Host: thenewhealthinstitute.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 29 Sep 2022 00:02:56 GMT
server: LiteSpeed
location: https://thenewhealthinstitute.net/awbPromo103
platform: hostinger
content-security-policy: upgrade-insecure-requests
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 23:15:46 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fT0IL-e_AkqZY6CnPzhyBufn3d6jlKR9a5g3DA_CWrsL1iMLwxQ5Vg==
Age: 2830
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8afc4649e99d0e42b9bf5b133eebed5c
e3e7e0e614af3262b74bd4b6267ef23293bdb5f0
e16e8b782b441ecb9a57c3fc3db9884b5a3034967b846cca67b2f53644fcabdf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E16E8B782B441ECB9A57C3FC3DB9884B5A3034967B846CCA67B2F53644FCABDF"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4275
Expires: Thu, 29 Sep 2022 01:14:11 GMT
Date: Thu, 29 Sep 2022 00:02:56 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Y8zOgs0HISZ7q4YD3/XihT2U+YHzrYXhUzme57qtvyWTiFgsTrWsr+MpXNxuaFjaxzniKPr4+Ag=
x-amz-request-id: 3XP5JK0TFRTFMCAT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 28 Sep 2022 23:47:40 GMT
age: 916
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 00:02:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
thenewhealthinstitute.net/awbPromo103
200 OK 516 B URL HTTP/2 thenewhealthinstitute.net/awbPromo103
IP
ASN #47583 Hostinger International Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5d2c732e2a94b19dd13c9fd6a752a36a
77eedd61af7b31757f1655d967536632e52b5ffc
5efc561fd50a90ce91be4a0ce73c2d2c516e7ae0457affa89e5880de4f258d9c
Analyzer Verdict Alert fortinet Phishing
GET /awbPromo103 HTTP/1.1
Host: thenewhealthinstitute.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/7.4.30
set-cookie: prli_click_252=awbPromo103; expires=Sat, 29-Oct-2022 00:02:56 GMT; Max-Age=2592000; path=/; secure
prli_visitor=6334e0b08ae39; expires=Fri, 29-Sep-2023 00:02:56 GMT; Max-Age=31536000; path=/; secure
x-robots-tag: noindex, nofollow
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 07 Jul 1777 07:07:07 GMT
x-redirect-powered-by: Pretty Link Beginner 3.2.4 http://prettylink.com
content-type: text/html;charset=UTF-8
content-length: 516
content-encoding: br
vary: Accept-Encoding
date: Thu, 29 Sep 2022 00:02:56 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 23:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 29 Sep 2022 00:14:31 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aB10qjzAJQLWbbqaeM0vGpFX7UFp-YkKsSewL1anmD6YB9pB8zE8HA==
Age: 2003
thenewhealthinstitute.net/wp-content/plugins/pretty-link/pro/js/javascript-redirect.js?ver=3.2.4
200 OK 99 B URL HTTP/2 thenewhealthinstitute.net/wp-content/plugins/pretty-link/pro/js/javascript-redirect.js?ver=3.2.4
IP
ASN #47583 Hostinger International Limited
Hash 86f60f0ee06297a33cc7b381b3a71b38
5e6408f710170c11af079400f6dc47027ff8f5c3
ed8fa1ff8b55dd19225f59a5e74520a8b20206c2f6d354e1e6f0e5881d93fe4a
GET /wp-content/plugins/pretty-link/pro/js/javascript-redirect.js?ver=3.2.4 HTTP/1.1
Host: thenewhealthinstitute.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://thenewhealthinstitute.net/awbPromo103
Cookie: prli_click_252=awbPromo103; prli_visitor=6334e0b08ae39
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 06 Oct 2022 00:02:56 GMT
content-type: application/x-javascript
last-modified: Tue, 23 Nov 2021 09:13:53 GMT
etag: "63-619cb0d1-909db3c0fa58c2cf;;;"
accept-ranges: bytes
content-length: 99
date: Thu, 29 Sep 2022 00:02:56 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3526d5ce1381ba26cbc553db057e1915
fe01c920696448e8bf12e6fff877bce8281d34a2
09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3259
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:56 GMT
Last-Modified: Wed, 28 Sep 2022 23:08:37 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7T4poOgqTHf/+vQ1eYoQLQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zDE/iX3p5OStQnHgszej+OE+Dgw=
ocsp.digicert.com/
200 OK 279 B IP
Hash 5f4b013b5656bef604b0022eb233d049
5b5ac71b8dbb5b488d7267d0d70292c2f7651c5b
238fd305a8853df61050a601a24c483728ab6695658f993bc179a075a5616cd9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4792
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Last-Modified: Wed, 28 Sep 2022 22:43:05 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 5f4b013b5656bef604b0022eb233d049
5b5ac71b8dbb5b488d7267d0d70292c2f7651c5b
238fd305a8853df61050a601a24c483728ab6695658f993bc179a075a5616cd9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4792
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Last-Modified: Wed, 28 Sep 2022 22:43:05 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 2b52ad405720d7d4665f40f842db9e99
c7e9646a8f2d2d8e932b26d231a518647230e308
c1d5aef26522bc5412943bef33f64ed3491d51283b1f740765d775b0ded71330
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6388
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Last-Modified: Wed, 28 Sep 2022 22:16:29 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8eb56ca84ce38713c2575c9d5506eabe
294a9ea859390bfe5d73cf810eefae10bf0f2f5e
6e7141f2c597344a55bf1d3a3ca0b9f0bf02f32a6046b3bfa03b64048a1d7002
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/ouibounce/0.0.11/ouibounce.min.js
200 OK 652 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/ouibounce/0.0.11/ouibounce.min.js
IP
File type ASCII text, with very long lines (1594), with no line terminators
Hash c818d82aa5e3bdccc5b03a0817e79019
eefd8067c955a16ae95700c381e8566d0d92f22d
f2b131b2496d03050cd1b882e74d3ecdfbad3b8e167525ea2aa580921e447793
GET /ajax/libs/ouibounce/0.0.11/ouibounce.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 652
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f3f-63a"
last-modified: Mon, 04 May 2020 16:13:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9853758
expires: Tue, 19 Sep 2023 00:02:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OPOxMpXSVuB0G0%2F3zwaa3YnfoP1pSe46q3i9HmeHAoXASuAd9mVLbwx0%2F6gcfNJu2hc2wnw6AU9xtbj9KoS9r1Usjibed9NGXL4Ifwxog5CAGNLHUufgfzvVt5KomESVLWuX7IOL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 752073f5ab4cb4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8eb56ca84ce38713c2575c9d5506eabe
294a9ea859390bfe5d73cf810eefae10bf0f2f5e
6e7141f2c597344a55bf1d3a3ca0b9f0bf02f32a6046b3bfa03b64048a1d7002
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8eb56ca84ce38713c2575c9d5506eabe
294a9ea859390bfe5d73cf810eefae10bf0f2f5e
6e7141f2c597344a55bf1d3a3ca0b9f0bf02f32a6046b3bfa03b64048a1d7002
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8eb56ca84ce38713c2575c9d5506eabe
294a9ea859390bfe5d73cf810eefae10bf0f2f5e
6e7141f2c597344a55bf1d3a3ca0b9f0bf02f32a6046b3bfa03b64048a1d7002
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/themes/smoothness/jquery-ui.css
200 OK 8.4 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/themes/smoothness/jquery-ui.css
IP
File type ASCII text, with very long lines (2363)
Hash de9bb8d47e1580640782b3eab858f03f
f3d227a1c7e253edf7d81c256363b6539640a7ce
9235ed785c01b71d95569858aef7512da7614b91915cba9d59e5ef83a8cae20c
GET /ajax/libs/jqueryui/1.12.0/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8425
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 20:03:07 GMT
expires: Tue, 26 Sep 2023 20:03:07 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 187190
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/css; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/js/zenith_labs_disclaimer.js
200 OK 1.8 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/zenith_labs_disclaimer.js
IP
Hash 9bd2d5d52697ed56cdfa43efdec4c1a8
d73802d149579511ad82e4743e4a73c62356d1e3
3ec6ad782d88929cf07d94d5f75f81487e9080c4926aa890dba75b6484db8a6a
GET /js/zenith_labs_disclaimer.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 28 Sep 2022 04:48:32 GMT
last-modified: Mon, 18 Nov 2019 23:56:01 GMT
etag: W/"a3cafa99bdcb707b402bb3367862ea82"
x-amz-version-id: DEcNi.OVzcmIX2w5hQh73fZBHrGwpMi0
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: br0oEIE5zhdEMPmBOdQIkCVAiA9uXOL_iOLHNtIJgHQnjHM6EF_H7A==
age: 69266
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.0/jquery.min.js
IP
File type ASCII text, with very long lines (32069)
Hash 4ae540714475aa934955496d990ab15f
b7724c4d72a422b86f5dc06571ff4bc86f0308a3
ca0222f8799d862ca8c427d6c612878f47043c9445ad0e1567f1f80e83c965e2
GET /ajax/libs/jquery/2.2.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30089
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 00:55:39 GMT
expires: Thu, 28 Sep 2023 00:55:39 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 83238
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75eebff373cf84ae810a9e326f9e3d03
a5b22b0eee98dda385cb4e90d119205bc5f3a25f
f2089c63c7c2b3024972aba8cbc12dfcffc79dfc1ef9f7be801c79e7737b0d71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/jquery-ui.min.js
200 OK 68 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.12.0/jquery-ui.min.js
IP
File type ASCII text, with very long lines (32250)
Hash 4cce6089a385afed0cf53e1a918c09a6
2ae32ed83daefef2940d993c0643fe1ecd17e43a
a9edbefa458da0266f540d9ccfa0b5d3d2fb5894170a6261518ddc5471f7f910
GET /ajax/libs/jqueryui/1.12.0/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 67885
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 05:39:32 GMT
expires: Wed, 27 Sep 2023 05:39:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 152605
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/js/uikit.js
200 OK 24 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/uikit.js
IP
Hash b0c877d9aaf64484ccff0a01c15d8208
e9d6494252b4a7e60d9f066c8639dc794d09da92
dd7268e984cc310113238ead2e7c18658d3502b5a62189092f632d7a9151c559
GET /js/uikit.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Nov 2018 00:00:25 GMT
x-amz-meta-s3b-last-modified: 20181120T000006Z
x-amz-version-id: duhEjCraPA4oBZnQrp_5xZaGERwotBcm
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 02:56:48 GMT
etag: W/"01c6752b3407d2855387e7ebdce2c9b4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iYZUnQ8VYGOI9k7V1b70UDXf5gNgJQVNBqOQzgX1XH3TcLZqs_ilZw==
age: 75970
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/js/exit.js
200 OK 848 B URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/exit.js
IP
Hash bc8ec82697e12e437c8763b622bc6c76
3f0e661b053e091cb1b39d5d5e5c2ffb58ad3802
e2168287b6de9c5f776ab551cb69bdd5fe575e2a4df8ceeb70b82bde85de12a5
GET /js/exit.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Nov 2018 01:19:39 GMT
x-amz-meta-s3b-last-modified: 20181120T011925Z
x-amz-version-id: WcoW9CDTqWsVAozmBYHPs87Lb_o4ebVb
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 03:38:06 GMT
etag: W/"2f6491198e9bc6054b95100d234c333e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uADHpcvUrthMBpZH0Q679zBOkgl3LkIvIRKQ_RyoE2VpuZbv7rreeA==
age: 73492
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8eb56ca84ce38713c2575c9d5506eabe
294a9ea859390bfe5d73cf810eefae10bf0f2f5e
6e7141f2c597344a55bf1d3a3ca0b9f0bf02f32a6046b3bfa03b64048a1d7002
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypalobjects.com/en_US/i/scr/pixel.gif
200 OK 43 B URL HTTP/2 www.paypalobjects.com/en_US/i/scr/pixel.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /en_US/i/scr/pixel.gif HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/gif
date: Thu, 29 Sep 2022 00:02:57 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "5d5637be-2b"
expires: Thu, 29 Sep 2022 01:02:57 GMT
last-modified: Fri, 16 Aug 2019 04:57:34 GMT
paypal-debug-id: 81b5359302d60
server: ECAcc (ska/F6E2)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 43
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8eb56ca84ce38713c2575c9d5506eabe
294a9ea859390bfe5d73cf810eefae10bf0f2f5e
6e7141f2c597344a55bf1d3a3ca0b9f0bf02f32a6046b3bfa03b64048a1d7002
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N3HNC48
200 OK 93 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N3HNC48
IP
File type ASCII text, with very long lines (37479)
Hash fd7e1053d5bbe1b0292fc0b094bc4e85
8a85b168415b46567dea5e61e1bc5d67c989b1b5
0dbe020f0b8cbebb176cc66ad92c7e28a630052372c364aa6cb1f3c104fb2584
GET /gtm.js?id=GTM-N3HNC48 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 29 Sep 2022 00:02:57 GMT
expires: Thu, 29 Sep 2022 00:02:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93387
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75eebff373cf84ae810a9e326f9e3d03
a5b22b0eee98dda385cb4e90d119205bc5f3a25f
f2089c63c7c2b3024972aba8cbc12dfcffc79dfc1ef9f7be801c79e7737b0d71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash e2dbabc594863c10d19ee31eacef1d0a
e3b6eaf79a644435c868b1df44005ec97d6a34e9
f6c8e878d0922777a8a6f40b2e7b761489e1da81017efae41e8dc7f78242708a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F6C8E878D0922777A8A6F40B2E7B761489E1DA81017EFAE41E8DC7F78242708A"
Last-Modified: Tue, 27 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 29 Sep 2022 06:02:57 GMT
Date: Thu, 29 Sep 2022 00:02:57 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 984 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
Hash 3b7f9b5c17e30ad96ffe833ecda7462f
74c6a16f455c890ac5f46f7c4e41319f16a16e69
f65884952a349645c780c2e31e670857e2dc81a49e4e1abf1b4d467a6ecf916a
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 00:02:57 GMT
date: Thu, 29 Sep 2022 00:02:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freedomfromjointpain.com/?tid=1026a4f6aece465e230f05782da08a&aff_id=1987&sub=awbPromo103
200 OK 86 kB URL HTTP/2 freedomfromjointpain.com/?tid=1026a4f6aece465e230f05782da08a&aff_id=1987&sub=awbPromo103
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (659)
Hash 48d39553a308bbde2c464351c8df9f57
51d04d9507d2c8d24d4052004469a40ea9406aa2
65a3e37e54c7d9f518e2c1c71a888fe5947cc4630de9da021f39fa42d51e6780
GET /?tid=1026a4f6aece465e230f05782da08a&aff_id=1987&sub=awbPromo103 HTTP/1.1
Host: freedomfromjointpain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://thenewhealthinstitute.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: tid=1026a4f6aece465e230f05782da08a; path=/
PHPSESSID=80f0bdab9b4beb4e0384241b61d2e575; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2O9%2B%2FzQpF9FrDzSc1bmUQU72UfR4CKG0P9QiAPuVbI7B4Oq9BRUEYj4V65%2Fv9bjoGM%2BKgqqy61JNoVV6ulHEJWcfPs0939J3DtA3DVkwzJXHqWVpRLC17C2RUfmWZ7u11FE26GZNgmDxaWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 752073f298f51c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
aff.freedomfromjointpain-trk.com/aff_c?offer_id=20&aff_id=1987&aff_sub=awbPromo103
302 Found 5.9 kB URL HTTP/2 aff.freedomfromjointpain-trk.com/aff_c?offer_id=20&aff_id=1987&aff_sub=awbPromo103
IP
Hash 55828e0ac3fa629012e5b80ea79a4ce2
0b459c15e17c2f7d9ed0d2e5cf23e89aff25c341
ddd4cc59c67b67f50670870db798cc0b4a84e2a58008fc7920a0b1338780b1d3
GET /aff_c?offer_id=20&aff_id=1987&aff_sub=awbPromo103 HTTP/1.1
Host: aff.freedomfromjointpain-trk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://thenewhealthinstitute.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: text/html; charset=iso-8859-1
location: https://FreedomFromJointPain.com/?tid=1026a4f6aece465e230f05782da08a&aff_id=1987&sub=awbPromo103
cache-control: no-cache, no-store, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
p3p: CP="NOI CUR OUR NOR INT"
pragma: no-cache
set-cookie: enc_aff_session_20=ENC032828515cd7a6bda48a047d61b46abe32e7746e3de5fd68a229cabaa8a08eedcf3193ad1da99a157534df631e95240e274b19b690719c50e5e96d2dca9f6ee1c12e6e7dab01e882f29666785c158dcd068a1bd3765aec0c2191b80f715d4cde187957266fb3f1ffd0f3d4d08d57b114c00d92d11eccde317184710744c0c73c9d8262626c7b7edef9079feb9e59989d9af17a137388758a6126702f5040eec6162f864afa; expires=Tue, 29 Nov 2022 00:02:56 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Sat, 23 Aug 2025 10:42:56 GMT; path=/; SameSite=None; Secure
tracking_id: 1026a4f6aece465e230f05782da08a
x-robots-tag: noindex, nofollow
access-control-allow-origin: *
x-request-id: ba623fa415cf79a171bfe66554d957b0
access-control-allow-headers: Tune-SDK-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fl8ssHXXARMUVUP3IRmEz%2F6RGpgm8gb8vJqXaRYn3WZzyBoLV2%2FbHVHnWVDaGvZasvgcM1NMYhLWTXimCfBR7SzVUlb4S7rdGnrny0XQcAxyN8D3oqefCo5VIy4dnSjPfQZWTV5hXB9ZzfWM5ulLyN63CQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 752073f1c8eab4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb2f3cc13b8ab763c5f346d6fc23054d
1768cc61721a6a6624c1ccbf2c874342f53abd99
3faee940dd222a051862bc2a4e090ecd2cc1f2ead8b1a5c84e10241f31461c5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d39ldsmboekjvi.cloudfront.net/js/no_right_click_protection.js
200 OK 33 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/no_right_click_protection.js
IP
Hash c26419e149d2c5b430253946608344dc
7741c7d227e431de2c778e3dc0e78402e26288b3
a2762d30868f6921ed62d42af3427cceb3045c56fbae2f70608ab24e7af93fb8
GET /js/no_right_click_protection.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 07 Jul 2022 20:59:37 GMT
x-amz-version-id: Q7Dwr74KGW4BZWaB24BFpcWq.2jcstjb
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 04:48:32 GMT
etag: W/"6ce078654f834a42688cb3c73ee1383a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fJMgW7kJP74yHcWQ7uv0qz_l7m1tBVuqfSKTldrdQ5owOniQGqbyLA==
age: 69266
X-Firefox-Spdy: h2
zenithlabs.com/js/restricted-countries.js
200 OK 19 kB URL HTTP/2 zenithlabs.com/js/restricted-countries.js
IP
File type ASCII text, with very long lines (3472)
Hash 580538210a3ebed9aff99eb9c6c8cbbe
ccb7e0a99d33f8f7731d9bc44e40c138dc366f48
7a9c8f7bc6186838bc39cb024d63af4639de3c7e0afa013e6ecac40a4820ea2d
GET /js/restricted-countries.js HTTP/1.1
Host: zenithlabs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=5684
expires: Mon, 03 Oct 2022 05:48:04 GMT
last-modified: Thu, 12 Mar 2020 18:14:54 GMT
pragma: public
vary: Accept-Encoding
cf-cache-status: HIT
age: 2218405
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=egbko209BqM4FcbBSJRiFWY8mSHYkBp%2Ffm4Okl3GpbScHZ4sMt58EGjz%2BWu44TEeJLuI4CxTp5M5Tr%2F8gDlJ102cVOOfONJQ47DoFLErjm8LRWXtpeQC1VgGkeoNRREHMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 752073f70eef0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 15dbf298fc5c3f79b34abf59118cc01c
c48dc908b9aa86adb5017683a23b625d8fd1b955
9061294bc67906630f52dfdb486941691a8b9291b938c032076cef3f7bf21ce7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d39ldsmboekjvi.cloudfront.net/images/icon-sound-white-left.png
200 OK 3.2 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/icon-sound-white-left.png
IP
File type gzip compressed data, max compression\012- data
Hash 097f0ec5642bf2dcbeb36bfd8917544c
f24c0d1d197ccab3b15bdb586148c649bb67f50d
6df06fec66c80092a4065246e5553da5966bef808b9c5c9cfdde2c2f0cb1b057
GET /images/icon-sound-white-left.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2661
last-modified: Fri, 19 Mar 2021 17:19:56 GMT
x-amz-version-id: XEnvvJY0CwpW_iyy4sEwFQNxvWcegx7T
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 05:35:03 GMT
etag: "2860a46a929a34328b4dc8eea3a3158e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kcW-oRdAbvc3ikqZjrZvnAZsyX-KJ02zJ3nsQRgfBgqhcD5fnN127g==
age: 66476
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/icon-sound-white-right.png
200 OK 2.7 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/icon-sound-white-right.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 27b267cd24c371af1af4ccaca426fbe9
4765161cbc74b757afd7b5921b22a30d809999a1
12156f127aa113789157e9b4483c5d0b01bb51d9031e73abd6e215acffc239c4
GET /images/icon-sound-white-right.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2711
last-modified: Fri, 19 Mar 2021 17:19:57 GMT
x-amz-version-id: 0FyhwOPLOoO5MLYAuQErRoheLdO2d.O3
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 04:48:32 GMT
etag: "27b267cd24c371af1af4ccaca426fbe9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YVngdBIFrk0mcjdtoG5EyKa_3peIrUHONWPUs4xZpm_bJw9Sw0AUlA==
age: 69267
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton-overlay.png
200 OK 13 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton-overlay.png
IP
File type PNG image data, 579 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash 446ef616ec92d84ced503824ce0bc3ed
0c69fb6c7ebef35c017f44d2bc1e60b632d51b6e
b45a61b6311dfb0b72551f2a1f5eca1b372b14f46c0c96830b15c95aaf388e17
GET /images/dr-ryan-shelton-overlay.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12678
date: Wed, 28 Sep 2022 04:48:32 GMT
last-modified: Tue, 20 Nov 2018 01:46:02 GMT
etag: "446ef616ec92d84ced503824ce0bc3ed"
x-amz-meta-s3b-last-modified: 20181120T014554Z
x-amz-version-id: LBbNwy_30csW1HuPkd6YbyClMjReAbFh
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j2OVC-5wtuhMQy1FgcXYbyCGY9V462lWb9f479Zl2dIL5YXuLodSAQ==
age: 69266
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/free_shipping.jpg
200 OK 11 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/free_shipping.jpg
IP
Hash 33513a7c7d016ec16679ea6c8adf8e3a
8f96b45a8305ac262efde84deb2d0c65123d4faa
cd5ba5afeb4d814f773cb534cbe38057c0a35502241bfd443064c2e248ac09ed
GET /images/free_shipping.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 10538
date: Wed, 28 Sep 2022 05:01:16 GMT
last-modified: Thu, 28 Feb 2019 22:22:53 GMT
etag: "8f282f99e63923648fbd6ca73d74936e"
x-amz-version-id: An62LR9YAH_31xHq_1rq6WDy7.kEpoCN
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EfjfmXGWe38PGHEhOZf5wHQ1irZoUkynpcl8Vv5zGTBcCSUihpkTyQ==
age: 68503
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton.png
200 OK 78 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/dr-ryan-shelton.png
IP
File type PNG image data, 402 x 601, 8-bit colormap, non-interlaced\012- data
Hash 2eedbec81b07802678e17a462d3840ef
4cef1f7b2f6a8208aabf2d083364a96d5e264dfd
4f2f4bb52429ce2bbe04f32c60fd6f6ff9f0a785bf9abb0d3e5529504f247d38
GET /images/dr-ryan-shelton.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 77512
date: Wed, 28 Sep 2022 02:16:28 GMT
last-modified: Tue, 22 Feb 2022 02:58:07 GMT
etag: "2eedbec81b07802678e17a462d3840ef"
x-amz-version-id: KY_fosChUjvreADt9xHMUrckclyt4cBt
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: weShnNoNwEnW2dtzzuPKdnJ6GfyBhdRHhOi-4KKormm3aUHDSNza8w==
age: 78391
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/products/jointn11/6pack.jpg
200 OK 98 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/products/jointn11/6pack.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 468x640, components 3\012- data
Hash cc36d16ecf64152844225afef293f99b
8031a226513b87889f3b5bad4dc4edc1bbb5b2af
d10f1dd59f897dfbc3b94fd7f78fc739b0a1ccd08050f905facb7be5e96b6a34
GET /images/products/jointn11/6pack.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 97991
last-modified: Fri, 18 Feb 2022 21:40:45 GMT
x-amz-version-id: MkJcCEm81TduArBKvxXxKZiU71eiImNQ
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:13:17 GMT
etag: "cc36d16ecf64152844225afef293f99b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EzkHIqsLwErZHsitucQYo-DRTUTpe9LXzkCvyixo4aCBh20qgPdxZQ==
age: 53382
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/dom_shipping.jpg
200 OK 13 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/dom_shipping.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251ileezhun - stock.adobe.com], baseline, precision 8, 300x100, components 3\012- data
Hash 4e32fad7018b42789465d31e94e7d0bf
675d5e0f63fed5cec5f93dbe80e0d02a691b5376
c512a3512d845b648eec688471d5923214b616fdc4882f8abec8646e3902a0ff
GET /images/dom_shipping.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12736
last-modified: Fri, 22 Apr 2022 14:26:09 GMT
x-amz-version-id: cNTz2UbHTrSLuSXE2Yz.I4d6sl2ZRimW
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 06:28:57 GMT
etag: "4e32fad7018b42789465d31e94e7d0bf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: t7scsh3BUQwY1X1_Ot7xOcwUlR5WJhEVisI2cxsmnDHFKzGx4PM4wA==
age: 63242
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/intl_shipping.jpg
200 OK 13 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/intl_shipping.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=\302\251ileezhun - stock.adobe.com], baseline, precision 8, 300x100, components 3\012- data
Hash 436cfd316279d6abfa9b81feecc0b4aa
f37ae836b9e2a47e0352feec56e9f30b27e86fe3
885845a9670614c0b8dbbf100d2ba0378921667178048afdb42b19d43d2c10ca
GET /images/intl_shipping.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 13304
last-modified: Thu, 28 Feb 2019 22:22:54 GMT
x-amz-version-id: gtN4o4onoB33_wgnNK9VywPUIf4t56l_
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 05:22:10 GMT
etag: "436cfd316279d6abfa9b81feecc0b4aa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lRuc4eTnCaOKtt-ppR1M6Yht39M-CmZtoeWiQEhsYCrgOPzkQbl_LQ==
age: 67248
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/products/jointn11/3pack.jpg
200 OK 87 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/products/jointn11/3pack.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 468x640, components 3\012- data
Hash 15d2b4d69eb10cbecefcf0a6eac571d4
498520d7968361979ff049d53d408588cfc36ea6
94bd4e5457a50b453ef27fb9ccba0a942d5419a34a0eed44ba53ef0e3af07a62
GET /images/products/jointn11/3pack.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 87382
last-modified: Fri, 18 Feb 2022 21:40:46 GMT
x-amz-version-id: pGjdtBVzJIF0xfL7bkhMbdEfjy6jPnaM
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 18:01:59 GMT
etag: "15d2b4d69eb10cbecefcf0a6eac571d4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gTKeHyZvfgNII__RFvYviTyBJmB7KajnJTrjSkfizvUwjBxK55UJOA==
age: 21660
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-JOINT-N11-BG.jpg
200 OK 262 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-JOINT-N11-BG.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x750, components 3\012- data
Size 262 kB (262288 bytes)
Hash c66d0f5a62957021035f6a58dcae7dff
92c99e7099aae9ebe9aab00525514bd2cbd7fea2
c240af612ad3a73a80ff7a81966e78705f1f47501f3a162c08adff23b2abe8f6
GET /images/product_labels_web/Z-JOINT-N11-BG.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 262288
last-modified: Wed, 22 Jun 2022 16:27:52 GMT
x-amz-version-id: Vo7B0fXtZf1qOXrRMD93YQXO_iotCxCd
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:13:17 GMT
etag: "c66d0f5a62957021035f6a58dcae7dff"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QVMJW-Jk2RhpeEC-RmfFCpAyG0DPqpWTVSUyIt94RVz5j3AEQiXY6g==
age: 53382
X-Firefox-Spdy: h2
d1d9rc24g3osu3.cloudfront.net/All_Sites_Miscellaneous_Resources/cover.png
200 OK 358 B URL HTTP/1.1 d1d9rc24g3osu3.cloudfront.net/All_Sites_Miscellaneous_Resources/cover.png
IP
File type PNG image data, 666 x 382, 8-bit colormap, non-interlaced\012- data
Hash 13910ff750192f062b2671e818dc2865
ab8479474ccc63b8900c93ab4686b1fc23e28765
067dcab543a3b7d9e0db0550eb52e7ab79844e89f3de5143920e96c1c4fb7df6
GET /All_Sites_Miscellaneous_Resources/cover.png HTTP/1.1
Host: d1d9rc24g3osu3.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 358
Connection: keep-alive
Date: Wed, 28 Sep 2022 03:10:58 GMT
Last-Modified: Tue, 24 Apr 2018 16:09:16 GMT
ETag: "13910ff750192f062b2671e818dc2865"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lpk2-pm6qF8kWerAEUG8gn1HZAJBw5LZUeZsVjWVJ-yriAepfe2t_A==
Age: 75121
d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-JOINT-N11-BG_zoom.jpg
200 OK 106 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/product_labels_web/Z-JOINT-N11-BG_zoom.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 804x405, components 3\012- data
Size 106 kB (105584 bytes)
Hash 4fcf85f20002e9a06e2932745978e447
bbadff00f9f9705e6f5f25b9b29ebcd102bf11d1
161d7b2f593aeb6f66d2550f130f4fafbe755484a5e4f70937995d4abc3ddad4
GET /images/product_labels_web/Z-JOINT-N11-BG_zoom.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 105584
last-modified: Wed, 22 Jun 2022 16:27:54 GMT
x-amz-version-id: EdwhyPKy_lel7MAtEQlcQjx0OilLd30p
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:13:17 GMT
etag: "4fcf85f20002e9a06e2932745978e447"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hrccAzk49YijILgGa3kLqONu6ddFiVeVWGq1G2JOKo9HfIx8YhqtkQ==
age: 53382
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/d-f.png
200 OK 9.8 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/d-f.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash f343e39e17123c807aa619b909fdf30d
62b3aa337d39e26f130a702b1190979229109911
882b1fa45cc75cfb64449064f3df638a371f299143c9945c9079f6422d202d5f
GET /images/badges/d-f.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9832
date: Wed, 28 Sep 2022 03:10:51 GMT
last-modified: Fri, 10 Jun 2022 16:07:52 GMT
etag: "f343e39e17123c807aa619b909fdf30d"
x-amz-version-id: cJoh1SrGbxog2W_25PAtTsADFCFVjreT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M9WSaJY3e4w5R0CFMNaTGe7i6sGCb3dHOIYmM8SjY1NZPA5YgKHwDA==
age: 75128
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/ngmo.png
200 OK 18 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/ngmo.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash e7b7f5606aaa08ee8c8c140ec6e1deb6
c8e40c781712ca70c7b78380218581e291b03658
fadff6c7aa1f4b3e5eb19151a5912132c0ca362fcc969371e1f4b9835080b416
GET /images/badges/ngmo.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 18151
last-modified: Wed, 01 Jun 2022 18:13:49 GMT
x-amz-version-id: 4HeBB4nlCf.pHNts4ns.xVYpPcwOaC1s
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 01:13:16 GMT
etag: "e7b7f5606aaa08ee8c8c140ec6e1deb6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9SjTHS5wa7L_9Co4hRwJI9SdZxrh6Udlvq6qzajUX9hOup5IU8Jw0w==
age: 82183
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/bgf.png
200 OK 10 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/bgf.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 1a339f8416769bec76ea59f8dfd8471a
5806e4d9b6d9a259bfec7da3acb718ff43fa727f
1a3bbc136565839f61660daacc232d925e00c7624fb708f52574827331c10b48
GET /images/badges/bgf.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10166
last-modified: Fri, 10 Jun 2022 16:07:51 GMT
x-amz-version-id: BP_Rs4AAndKeZGxQBP_YrdM4vRrvNXxd
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 08:11:18 GMT
etag: "1a339f8416769bec76ea59f8dfd8471a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8-AlByHBE8rvSC1TAvDr7wq3EqWDg9-6kdWqm0XV49aVNk0SOtCjgg==
age: 57101
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/cf.png
200 OK 26 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/cf.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c5748cdfeb6bb7e40daeea7e7552316
e00a55b67885b974da413cc5de4cd02ed45d5fc3
b719676b2cc2533311552d341001487a87926dc37d5172deb649feae2e268dbc
GET /images/badges/cf.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 25482
last-modified: Wed, 01 Jun 2022 18:19:19 GMT
x-amz-version-id: 8YACreWI.8NTmZh21cfHnjSbIWqmhAO0
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 01:13:16 GMT
etag: "7c5748cdfeb6bb7e40daeea7e7552316"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Btsksf85vc5MgxG8vStjDOzIT_niu7YoycCloXjopngtxgbB89hFEQ==
age: 82183
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/df.png
200 OK 15 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/df.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b53eb8acf8f445447247b2e432ecaeb
e125613554a91699aab8c133331986f2b6c3e302
cad11d9b87d5ef82eef6ada674cb0cd929b6e0e825a851a501644bd60deb98ae
GET /images/badges/df.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 15014
date: Wed, 28 Sep 2022 03:10:52 GMT
last-modified: Wed, 01 Jun 2022 18:13:44 GMT
etag: "5b53eb8acf8f445447247b2e432ecaeb"
x-amz-version-id: 2ZeRxXaq.h2W2FnYOljIyXli7E1u_Iy0
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0NCvY595nCpW9Y2YTiP4SfDZnh3R16yRqriktCi06HaeTDIyMjDR9w==
age: 75127
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 366fbb58b56c6469840359066ae0ef4b
519ec2d019a3df15e1555ee7e9f784207f3ee604
4c03f3b3b06d0359ff6c3e72e91c39cb8f6e6406ed7b8ba9e09708da8e2d38f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2714
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Last-Modified: Wed, 28 Sep 2022 23:17:44 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 29 Sep 2022 00:22:58 GMT
Date: Thu, 29 Sep 2022 00:02:58 GMT
Content-Length: 3249
Connection: keep-alive
d39ldsmboekjvi.cloudfront.net/images/badges/wii.png
200 OK 11 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/wii.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 383b97625af6456a4c941de066979ff7
b995c77e0ace45c90049a6397590b26389b29cb4
6d1989b0f4a75ee0afc16f0e101e97bbaa8ce86997466900e3fb50f5565e9519
GET /images/badges/wii.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 11329
last-modified: Fri, 10 Jun 2022 16:07:58 GMT
x-amz-version-id: o81g8xRE0bhm43QfTs8_LIfBFNXqYzVT
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 04:24:44 GMT
etag: "383b97625af6456a4c941de066979ff7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MJmjfbO_j8gw05BMlRffN29q5WYYNI6fQz18W3fjCPJYPcp8aSSibw==
age: 70695
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Wed, 28 Sep 2022 22:41:09 GMT
expires: Thu, 29 Sep 2022 00:41:09 GMT
cache-control: public, max-age=7200
age: 4909
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/ef.png
200 OK 19 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/ef.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash e1c9a64811b4fddcc2bf795f96191e22
21d761ca6eda27c107c6273f113be080769d6cb3
0416762a5050872c5e86a140ca3d6520a2c0f7f791f23bb26e0751e7446d9d62
GET /images/badges/ef.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 19276
date: Wed, 28 Sep 2022 05:01:17 GMT
last-modified: Wed, 01 Jun 2022 18:13:45 GMT
etag: "e1c9a64811b4fddcc2bf795f96191e22"
x-amz-version-id: 5r.Nxfj0rQ09ps.mZhfhBmV9d2_JwDGH
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZUS5KYrcHtyGiad9JRVmfscjqY5G8chVl08UPAhTfg66lCRwkZxmTA==
age: 68502
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/products/jointn11/1pack.jpg
200 OK 73 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/products/jointn11/1pack.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 468x640, components 3\012- data
Hash 37b4620d2f98c9c1ed158f3c93c6cc9f
7dc4b5115d4a1d775641455e235c0db4b63ded84
fd3680424645bf179469e2246dc98752fc3d70b3f0803517821ba0e775d2ab60
GET /images/products/jointn11/1pack.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 73337
date: Wed, 28 Sep 2022 19:41:00 GMT
last-modified: Fri, 18 Feb 2022 21:40:46 GMT
etag: "37b4620d2f98c9c1ed158f3c93c6cc9f"
x-amz-version-id: ocxc.X8XcK9HObGOOC9plpFG0irF05OX
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DYEAb2Tc96UWiiQ9KXKIKPypaHHXS3urTD-E3TqA8gbOFBxtXxmnbg==
age: 15719
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d39ldsmboekjvi.cloudfront.net/images/logo_vitamin_angels.png
200 OK 13 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/logo_vitamin_angels.png
IP
File type PNG image data, 519 x 518, 8-bit/color RGBA, non-interlaced\012- data
Hash 267abba3ee756561fc089a385784366c
9d442cd197817822f6589474492188a600abf978
8b4394abaeaee8b62be442b567fd9cf0759d17af0a90353962fe9e50c72daf51
GET /images/logo_vitamin_angels.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 12686
date: Wed, 28 Sep 2022 03:10:55 GMT
last-modified: Tue, 03 Mar 2020 18:35:37 GMT
etag: "267abba3ee756561fc089a385784366c"
x-amz-version-id: OuKUrtD6HwXd0PmjkmylxPJLJBcyapi.
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SEdetJDxgz9wVa3NHjWRspLdYYsNpp_qkmD-XmhSB5LTGQqy889SOA==
age: 75124
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/gmp.png
200 OK 31 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/gmp.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash e656b73f2139a20d656babce104cf503
9fd7b4fc70b83465d7eb645a4951b7daebd9d2ed
6031307ef4cbdcedb03575752f82cb6fc198fd9f096abdcbdf3988cc7c8205a7
GET /images/badges/gmp.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 31157
last-modified: Wed, 01 Jun 2022 18:13:47 GMT
x-amz-version-id: s_7Wdu1kOlAA9LU6yIxb6pRo2bVy8Bsu
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 00:02:58 GMT
etag: "e656b73f2139a20d656babce104cf503"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XJMeSkeQRmes_SKEBtYA8OP7neF7SW0R8ljqZi0ZWdHkXVITUXUC9A==
age: 31
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/gp.png
200 OK 30 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/gp.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash db932faef0f9b4f17895f0242637f204
cb7584c626bd41001f112ea47322bdc124515bec
c605bbc404f97b7cd8de456819115507d89319a844ef984bb38746aba68496b2
GET /images/badges/gp.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 29634
last-modified: Wed, 01 Jun 2022 18:13:48 GMT
x-amz-version-id: msVBPyqQwbPlvdnuU3ADvRN7EfRcpVhs
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 00:02:58 GMT
etag: "db932faef0f9b4f17895f0242637f204"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pVbKvcPT8KEsvYpz6-JZztiF733-eQm_33Lat5SmOw96WYMQd5-WHw==
age: 31
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=0A73132574BF69C80055010B75E8682A; domain=.bing.com; expires=Tue, 24-Oct-2023 00:02:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 15C13D8DBE834733AFA08A001E7D535D Ref B: OSL30EDGE0411 Ref C: 2022-09-29T00:02:58Z
date: Thu, 29 Sep 2022 00:02:57 GMT
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/vitamin-angels-vsl-lfsl.jpg
200 OK 368 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/vitamin-angels-vsl-lfsl.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x600, components 3\012- data
Size 368 kB (367952 bytes)
Hash 0d6852179e829463aa3d4f0f118e5f53
7b0098a4bd87c3c1067eddff5218ac815b933219
d28c0dd1d6d509daf8e3333f4ae83e732d9a95ee1986bed993cbed2a18e370cd
GET /images/vitamin-angels-vsl-lfsl.jpg HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 367952
last-modified: Wed, 04 Mar 2020 18:14:10 GMT
x-amz-version-id: oc2xwqc8xIVaaxoh4kVHs4xY1OdBLDGp
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 03:38:07 GMT
etag: "0d6852179e829463aa3d4f0f118e5f53"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aPJbRANbkSFMr7amEvNJ681Z7bWoOaSJ8179E22CXTTB02odNk-NGg==
age: 73492
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: KwJHvvE8jYphspX3h6LbWiYf1FwaNbOVX5O3v+07nxnNnCtszaSZNCMuSc0hMeDwmdFv5JthKr4bA89Lag38xg==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1904183273
date: Thu, 29 Sep 2022 00:02:58 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/nf.png
200 OK 15 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/nf.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 428a86ca4a94c3d724eadc3d98e672ce
40198c262ffd91eacf7b5eb3fbbb1f97ffea3da3
8ab0f11fbeb343ffe1b5e199c6b1941239f33d551f82aac838983c1b2bf32f6e
GET /images/badges/nf.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 15219
last-modified: Wed, 01 Jun 2022 18:13:48 GMT
x-amz-version-id: fZ8EbMs6OE0Iun4oDVfKqV8w_AM2Epwd
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 00:02:58 GMT
etag: "428a86ca4a94c3d724eadc3d98e672ce"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vBGLxyhsryPBh-Bs0HjL_OwB_7ffNmPaIIgq4lk4hz1T7aGqe7yUFg==
age: 10377
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
200 OK 61 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash f939fbcd8c37dc5d56212ec4b06c194a
88de13cd282e7f5de4409c27a273a7b984899e72
3107757fa5ff193c19873592ae447c8c22b5d9352ca6fa9f918702c5252aa84c
GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 02/17/2022 20:27:53
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 441a5c346e6138207e493340368ec0b9
cdn-cache: HIT
cf-cache-status: HIT
age: 9856138
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 752073f57a57b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j97&a=1420742381&t=pageview&_s=1&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&dr=https%3A%2F%2Fthenewhealthinstitute.net%2F&ul=en-us&de=UTF-8&dt=Joint%20N-11%20-%20Official%20Website&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBACEABBAAAAC~&jid=741541917&gjid=1605490412&cid=2032563015.1664409776&tid=UA-156185630-1&_gid=1547884790.1664409776&_r=1>m=2wg9q0N3HNC48&z=262053568
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j97&a=1420742381&t=pageview&_s=1&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&dr=https%3A%2F%2Fthenewhealthinstitute.net%2F&ul=en-us&de=UTF-8&dt=Joint%20N-11%20-%20Official%20Website&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBACEABBAAAAC~&jid=741541917&gjid=1605490412&cid=2032563015.1664409776&tid=UA-156185630-1&_gid=1547884790.1664409776&_r=1>m=2wg9q0N3HNC48&z=262053568
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j97&a=1420742381&t=pageview&_s=1&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&dr=https%3A%2F%2Fthenewhealthinstitute.net%2F&ul=en-us&de=UTF-8&dt=Joint%20N-11%20-%20Official%20Website&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBACEABBAAAAC~&jid=741541917&gjid=1605490412&cid=2032563015.1664409776&tid=UA-156185630-1&_gid=1547884790.1664409776&_r=1>m=2wg9q0N3HNC48&z=262053568 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://freedomfromjointpain.com
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://freedomfromjointpain.com
date: Thu, 29 Sep 2022 00:02:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/badges/bpa.png
200 OK 22 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/badges/bpa.png
IP
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b03d03de1fe40ad35a499ebb04bde80
1a3955e79982e828fdd3223261e462498061c214
3ef33394d38388702b5243ee6283bb8926f60f8a05ce5c8e4425360103a1dfe3
GET /images/badges/bpa.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 21977
last-modified: Wed, 01 Jun 2022 18:13:42 GMT
x-amz-version-id: 0azimArKYcCNV_S3nSzrlv1t8z9P2L9L
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 00:02:58 GMT
etag: "5b03d03de1fe40ad35a499ebb04bde80"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AEtCCTPMvSkEQoiI0tUX_hwt1PTZbarBZaKaaJkjSPJmAtQ10AOD-g==
age: 31
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/images/favicon.png
200 OK 4.7 kB URL HTTP/2 d39ldsmboekjvi.cloudfront.net/images/favicon.png
IP
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash 0ab1f879b41d8b6d06e9501c93ff5384
5a138a6cddefbfcb9c7a7dcd1e6d1a65933b3732
ed63764e0e7ad6ce136d6a42eb45061ea119225620b3bbe74e3ff531fe7672b0
GET /images/favicon.png HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4650
last-modified: Mon, 18 Mar 2019 17:53:36 GMT
x-amz-version-id: OMawaqXsfXN5qFt1g7WYqGHKV0D8edsA
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 03:53:37 GMT
etag: "0ab1f879b41d8b6d06e9501c93ff5384"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XEhE_GYUScWc4MM2-LU0ZIfJi8MX_XntZGd0blWJhVOZYagHlYmbXA==
age: 72561
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 7c71be22367266bd4b523b5f6a656f3f
019ddcb8c5c93d3f12fff3de33240f89efcdf143
a0fce2812150bd450b94c6db4e7dd0558f00beb52a7f4ed3187634ea0e9230b5
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 29 Sep 2022 00:02:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 28 Sep 2022 22:37:57 GMT
Expires: Thu, 29 Sep 2022 22:37:57 GMT
ETag: "019ddcb8c5c93d3f12fff3de33240f89efcdf143"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.youtube.com/s/player/5248e50a/www-widgetapi.vflset/www-widgetapi.js
200 OK 52 kB URL HTTP/2 www.youtube.com/s/player/5248e50a/www-widgetapi.vflset/www-widgetapi.js
IP
File type ASCII text, with very long lines (717)
Hash eb4b15f105419eab2f20751146c81c26
28596e60ecb5df96f5d459b408c9665be47a6ead
dea9e4663a1917ef192113fb3df02d0f2723ee8a8c3e6d46ba6bc31f92e9968b
GET /s/player/5248e50a/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 52495
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 14:49:34 GMT
expires: Thu, 28 Sep 2023 14:49:34 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 Sep 2022 00:24:52 GMT
content-type: text/javascript
age: 33204
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 366fbb58b56c6469840359066ae0ef4b
519ec2d019a3df15e1555ee7e9f784207f3ee604
4c03f3b3b06d0359ff6c3e72e91c39cb8f6e6406ed7b8ba9e09708da8e2d38f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4673
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Last-Modified: Wed, 28 Sep 2022 22:45:05 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
script.hotjar.com/modules.cf44a0a6b448df1b035e.js
200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.cf44a0a6b448df1b035e.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 5f131c93ccff63ccc86d0067d0eebf99
a599898399783be0db5f757c043b828a0726deec
91980f4223c639c3849139a6e692ccf10310f0b57d74b403198af020fc7398a2
GET /modules.cf44a0a6b448df1b035e.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 66148
date: Wed, 28 Sep 2022 11:37:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "5f131c93ccff63ccc86d0067d0eebf99"
last-modified: Wed, 28 Sep 2022 11:36:53 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BPMCTKzSbyDfMRkMO5SGjQnYVGWxYFER5DIMZZSmLVF0hD-o7s0MJw==
age: 44752
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 56fbf03a862e84aba1d3bf4a7816fb96
a51d64f57905cc889c7cd89677974f1479df4d8f
af36b66cd5cc1a570befa5d2cc716e19b8a284cf32ddda500a980a4820441e81
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 00:02:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 06:50:40 GMT
Expires: Wed, 05 Oct 2022 06:50:39 GMT
Etag: "a51d64f57905cc889c7cd89677974f1479df4d8f"
Cache-Control: max-age=542260,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 752073fb0d1c0b45-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4209
Expires: Thu, 29 Sep 2022 01:13:07 GMT
Date: Thu, 29 Sep 2022 00:02:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4209
Expires: Thu, 29 Sep 2022 01:13:07 GMT
Date: Thu, 29 Sep 2022 00:02:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4209
Expires: Thu, 29 Sep 2022 01:13:07 GMT
Date: Thu, 29 Sep 2022 00:02:58 GMT
Connection: keep-alive
pro.ip-api.com/json/?fields=status,message,countryCode,regionName&key=5vWn1Ta5eS1fVrD
200 OK 66 B URL HTTP/1.1 pro.ip-api.com/json/?fields=status,message,countryCode,regionName&key=5vWn1Ta5eS1fVrD
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 187b25317d9dc668ae1b3791df28e465
bfa44d2b55fcf75ef4bd88559fda297ee45e2312
0b6cd5b7c92567d4117e8eaac50933cc01ffdfeaf20457fa89623c653fe8c132
GET /json/?fields=status,message,countryCode,regionName&key=5vWn1Ta5eS1fVrD HTTP/1.1
Host: pro.ip-api.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedomfromjointpain.com
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Type: application/json; charset=utf-8
Date: Thu, 29 Sep 2022 00:02:58 GMT
Content-Length: 66
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4364fa358f76c1635458dab5d598f857
d15fc7359711b1651235fa1be66accc03fe26c1c
6449bf062dbb79683071f367ca142c175ef304485cb4d3711feb4763146e4fa7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4209
Expires: Thu, 29 Sep 2022 01:13:07 GMT
Date: Thu, 29 Sep 2022 00:02:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facd7b538-d96a-4708-95ed-af68304277d4.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facd7b538-d96a-4708-95ed-af68304277d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dca86bc432ad7d82538e6edac4744212
06a379cb61f7d7f113225b46e3f5e7ced25c6878
55e111e036369e426b8f32f4a43ecec7fb8257b20de8445ae533676acbacb8de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facd7b538-d96a-4708-95ed-af68304277d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9312
x-amzn-requestid: 0982fd37-74e6-4b48-8c8c-3a34fd383655
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJo02EEQIAMFsIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333bb52-66367f6431f844e965b07df5;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 03:11:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: OCOjusDJyyLyZ4De6uKs_LlylPONEcdMfURt6Ma-rLPRtKIMNHG9Cw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 03:36:21 GMT
age: 73597
etag: "06a379cb61f7d7f113225b46e3f5e7ced25c6878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c62a6368c456e9614ca4c8e360a2ef12
35ec6e80d324bb215796c590a7ffafbaea55d88e
90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7859
x-amzn-requestid: 34d0718f-46d4-446f-bb06-8449bd8f4287
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZIlO4FcBoAMFy0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63334f2b-58ae81c9077e4f1575750f15;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 19:29:47 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LwYd0qn4P-zh1W4GvU8vNEo3_TZHEqtErAj3UKx7a82LIDaBsiXE-w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 19:04:20 GMT
age: 17918
etag: "35ec6e80d324bb215796c590a7ffafbaea55d88e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff61695e2-14b2-44b1-b2d0-93aed95788f3.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff61695e2-14b2-44b1-b2d0-93aed95788f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 33d8a1c1782f57095619cfba8c58a4a5
9f21cefa8882ea63961ae2eb51b7cd406b2358d6
47c04dd3680f76a5bc54157c64d64dcb7dea517c8dace4fdcf8e46df43fa9cae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff61695e2-14b2-44b1-b2d0-93aed95788f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10272
x-amzn-requestid: 443e641f-25dc-456c-bb7f-ae23153dc52d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVSwECzoAMFpeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633268de-20524e433a72428653175a94;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:10 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: U4PCOUZJFTvrqjsqGT3JpVnrbjqvkvG4vvqZbyFGk1ri0k_U33N3TA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 03:55:45 GMT
age: 72433
etag: "9f21cefa8882ea63961ae2eb51b7cd406b2358d6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 456968f691ae9464d69a37bffe9bd7ce
31b8538deb0f00d5b4182739a4a2fcc1b956a998
5cde1e3158e6c6c0b7a01d3bd32f2aa292b3b205f604e5c4ed71cafedad06bf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7810
x-amzn-requestid: ff9cdb43-e7f3-4fb3-a2c9-28059f7749e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVYtFlRoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326904-2b426b8e379fb9da122731e6;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: v_9XHswnO6iHo9-XgqSOIDYxa_RSEzQTDqJ5Uoi5pB9sJ3kl3H-XSQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 23:45:29 GMT
age: 1049
etag: "31b8538deb0f00d5b4182739a4a2fcc1b956a998"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6acbf011-a3c6-43cd-8ac6-b264d0806686.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6acbf011-a3c6-43cd-8ac6-b264d0806686.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2dae2d2b731dbea3d72711eb4dff2567
9d4b472b38d146bb1d9b46ee881628abb8cd5dc5
21f6b8a436e6ac990601a046f85ed78a2a4af899550d80ce66c43cfdfdcdaae7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6acbf011-a3c6-43cd-8ac6-b264d0806686.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12387
x-amzn-requestid: f1d334f6-9f3b-4af0-bc93-3b9e276311e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVYsE0DoAMFkZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326904-581bb7ec2cb9af0330ea7e8a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7VKjW9x-rm4hk_Aedl62qsXOG5t1pqrYZ7PFIo6_oF3aNYbC1taJCg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 03:25:43 GMT
age: 74235
etag: "9d4b472b38d146bb1d9b46ee881628abb8cd5dc5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30471179bd7cdeecea2fa4ea98701aef
2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb
967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4235
x-amzn-requestid: 60825c64-7743-4b16-b80d-d1195ccb0f23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK2nFsDoAMFRwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be90-1898e5d9111db7c843c1ebb4;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C-XC9qsktkENdI6lWZp5RQjeEvrrFMUfBq1mA5dxEjRq5tkfL5Jsxw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:04:55 GMT
age: 7083
etag: "2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1270828/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1270828/tfa.js
IP
File type ASCII text, with very long lines (58490)
Hash 9487818ebea0384f240ecd4329d3bc64
d40aa6ff72c55da412c813e07d391942a1147d9d
29579a87e7c03d0f68f5723adf1b3631a92ba6bd6dc640ab1c5b78fdb0420550
GET /libtrc/unip/1270828/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CqBeCcu3BdWztVDFr6LXeyVb8tQYEkSKtuLBlRyvFujVoqCxSJMDbNQBF+650NvFFqV1ZkMtIQ8UzmY7Cjlkhw==
x-amz-request-id: SWV8HCW7RK1E64QP
x-amz-replication-status: COMPLETED
last-modified: Sun, 25 Sep 2022 11:21:38 GMT
etag: "1d05aa445ffd4eddfa76d2cd5427e46a"
x-amz-version-id: tftCKL_TVwo99.ORBnzwihiaus5MYolc
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 29 Sep 2022 00:02:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664409778.313102,VS0,VE197
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 97
content-length: 17951
X-Firefox-Spdy: h2
vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash f6a9ca04b0687ea3c0d98e8430c8c77b
35503b2deb23091a9a9c6c68d4020dbdf879588e
8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L-Xmpdhtap8FWlijxybRZamgXEXSnrKSTxeF9XRf5Pe-gZIW3SIQYQ==
age: 1867551
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=56323860&tm=gtm002&Ver=2&mid=179b318c-7e8d-488b-961b-51cd93c3a0a0&sid=120052903f8a11ed90b51bfaa8a90c97&vid=120080403f8a11eda49025fc40608f47&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Joint%20N-11%20-%20Official%20Website&p=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&r=https%3A%2F%2Fthenewhealthinstitute.net%2F<=1124&evt=pageLoad&sv=1&rn=640410
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=56323860&tm=gtm002&Ver=2&mid=179b318c-7e8d-488b-961b-51cd93c3a0a0&sid=120052903f8a11ed90b51bfaa8a90c97&vid=120080403f8a11eda49025fc40608f47&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Joint%20N-11%20-%20Official%20Website&p=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&r=https%3A%2F%2Fthenewhealthinstitute.net%2F<=1124&evt=pageLoad&sv=1&rn=640410
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=56323860&tm=gtm002&Ver=2&mid=179b318c-7e8d-488b-961b-51cd93c3a0a0&sid=120052903f8a11ed90b51bfaa8a90c97&vid=120080403f8a11eda49025fc40608f47&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Joint%20N-11%20-%20Official%20Website&p=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&r=https%3A%2F%2Fthenewhealthinstitute.net%2F<=1124&evt=pageLoad&sv=1&rn=640410 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=33691150E8D6651E3A48037EE981641F; domain=.bing.com; expires=Tue, 24-Oct-2023 00:02:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5B74E85FAEA24B6BBED3DF0E7FE127D7 Ref B: OSL30EDGE0411 Ref C: 2022-09-29T00:02:58Z
date: Thu, 29 Sep 2022 00:02:57 GMT
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
200 OK 1.8 kB IP
Hash 7c71be22367266bd4b523b5f6a656f3f
019ddcb8c5c93d3f12fff3de33240f89efcdf143
a0fce2812150bd450b94c6db4e7dd0558f00beb52a7f4ed3187634ea0e9230b5
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 29 Sep 2022 00:02:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 28 Sep 2022 22:37:57 GMT
Expires: Thu, 29 Sep 2022 22:37:57 GMT
ETag: "019ddcb8c5c93d3f12fff3de33240f89efcdf143"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dev.visualwebsiteoptimizer.com/7.0/va-880125e9d54dfe293abee3025caba55e.js
200 OK 65 kB URL HTTP/2 dev.visualwebsiteoptimizer.com/7.0/va-880125e9d54dfe293abee3025caba55e.js
IP
File type ASCII text, with very long lines (62897)
Hash ca9ea68a4dcc12d189aba58beed80817
4fafdcbdbde9b46ac053f112c409b0da60239b35
45e934a91c9cb78316a7ff276e1f012d0c0c980b4618ae1d81247595dd685ba9
GET /7.0/va-880125e9d54dfe293abee3025caba55e.js HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedomfromjointpain.com
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:58 GMT
content-type: text/javascript; charset=UTF-8
content-length: 65378
last-modified: Wed, 28 Sep 2022 12:00:09 GMT
content-encoding: br
etag: "63343749-ff62"
server: gams1
vary: Accept-Encoding, User-Agent
cache-control: public, max-age=604800
access-control-allow-origin: *
accept-ranges: bytes
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/56323860.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/56323860.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/56323860.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=23EC5AAA45686AD81F1D4884443F6B10; domain=.bing.com; expires=Tue, 24-Oct-2023 00:02:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BEE21F7E88014578ADA40C11B42231C7 Ref B: OSL30EDGE0411 Ref C: 2022-09-29T00:02:58Z
date: Thu, 29 Sep 2022 00:02:57 GMT
X-Firefox-Spdy: h2
dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=231917&d=freedomfromjointpain.com&u=D12FE21D3C557F9A1562B3546B46AF0D6&h=baa94aa4fe1f68ff80d4160aa6ffbb87&t=false&r=0.8697616548608228
200 OK 35 B URL HTTP/2 dev.visualwebsiteoptimizer.com/v.gif?cd=0&a=231917&d=freedomfromjointpain.com&u=D12FE21D3C557F9A1562B3546B46AF0D6&h=baa94aa4fe1f68ff80d4160aa6ffbb87&t=false&r=0.8697616548608228
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /v.gif?cd=0&a=231917&d=freedomfromjointpain.com&u=D12FE21D3C557F9A1562B3546B46AF0D6&h=baa94aa4fe1f68ff80d4160aa6ffbb87&t=false&r=0.8697616548608228 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:58 GMT
content-type: image/gif
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
expires: Mon, 10 Jan 2005 00:00:01 GMT
pragma: no-cache
x-content-type-options: nosniff
content-length: 35
server: gnv1c
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 12:31:58 GMT
expires: Sun, 24 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 387060
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Sep 2022 00:48:31 GMT
expires: Sat, 23 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 515667
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 74da23feb51541d5a4eb7eff61088b65
5b70a903aa00d079dc55487c7f7edd3bf0fd6bf6
23bbfc9938e7f0fe3a0cfb6f364bc149782ec836e4d6f5f31640a7ddacee7014
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4471
Cache-Control: max-age=129986
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Etag: "633427fd-1d7"
Expires: Fri, 30 Sep 2022 12:09:24 GMT
Last-Modified: Wed, 28 Sep 2022 10:54:53 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 74da23feb51541d5a4eb7eff61088b65
5b70a903aa00d079dc55487c7f7edd3bf0fd6bf6
23bbfc9938e7f0fe3a0cfb6f364bc149782ec836e4d6f5f31640a7ddacee7014
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4471
Cache-Control: max-age=129986
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:58 GMT
Etag: "633427fd-1d7"
Expires: Fri, 30 Sep 2022 12:09:24 GMT
Last-Modified: Wed, 28 Sep 2022 10:54:53 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
tr.outbrain.com/cachedClickId?marketerId=006a8dc9da81ab08022e55b61fb875da32
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=006a8dc9da81ab08022e55b61fb875da32
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=006a8dc9da81ab08022e55b61fb875da32 HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 00:02:58 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 20893b57b92bc522756b2ebb350f319c
content-encoding: gzip
tr.outbrain.com/unifiedPixel?marketerId=006a8dc9da81ab08022e55b61fb875da32&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&optOut=false&bust=08336871780076202&referrer=https%3A%2F%2Fthenewhealthinstitute.net%2F
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=006a8dc9da81ab08022e55b61fb875da32&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&optOut=false&bust=08336871780076202&referrer=https%3A%2F%2Fthenewhealthinstitute.net%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=006a8dc9da81ab08022e55b61fb875da32&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&optOut=false&bust=08336871780076202&referrer=https%3A%2F%2Fthenewhealthinstitute.net%2F HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 00:02:58 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: cdfb48f9c032845196e54bfe12379da9
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 253e735983d6b98808235295de508f8b
e47aa9e4c679c5215cd2d20cd3dcd7ce58fde86d
c4e13af46f6ab54af9a8d5a68fe5c12d8a5c41ed829568380bdeca8c729f1da5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-156185630-1&cid=2032563015.1664409776&jid=741541917&gjid=1605490412&_gid=1547884790.1664409776&_u=YGBACEAABAAAAC~&z=641326384
200 OK 1.7 kB URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-156185630-1&cid=2032563015.1664409776&jid=741541917&gjid=1605490412&_gid=1547884790.1664409776&_u=YGBACEAABAAAAC~&z=641326384
IP
File type gzip compressed data, from Unix\012- data
Hash 5a4906d3e18d76f5eea28f25a4a6037f
ceb49fbf0a0bc9311e3ae031d1b27768c4cc8cc8
1b0a1f41c11a35bdc92c023493fe21104d8239462fc98e1f5a65278ba8b22d9b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-156185630-1&cid=2032563015.1664409776&jid=741541917&gjid=1605490412&_gid=1547884790.1664409776&_u=YGBACEAABAAAAC~&z=641326384 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://freedomfromjointpain.com
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://freedomfromjointpain.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 29 Sep 2022 00:02:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/2933385093392789?v=2.9.84&r=stable
200 OK 88 kB URL HTTP/2 connect.facebook.net/signals/config/2933385093392789?v=2.9.84&r=stable
IP
Hash 7a8dd54ed4da887317dc78b6cf137919
c86c89bef239e39e4f1988888829ad06aca68c96
a44bbc9625c9261ff602996be144dc5cbbc130e7cb9f7025327a3f76d9ba2329
GET /signals/config/2933385093392789?v=2.9.84&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ke0tevu33/yLpyb3IFhpQ8e/kkZ58WeXoUuM841hhJPAHcYL0LNWt/YnP24DHD0Wp0STVUpvHlpOw051/Cw5FQ==
x-fb-trip-id: 1904183273
date: Thu, 29 Sep 2022 00:02:59 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2933385093392789&ev=PageView&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&rl=https%3A%2F%2Fthenewhealthinstitute.net%2F&if=false&ts=1664409776508&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664409776505.660378066&it=1664409775781&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2933385093392789&ev=PageView&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&rl=https%3A%2F%2Fthenewhealthinstitute.net%2F&if=false&ts=1664409776508&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664409776505.660378066&it=1664409775781&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2933385093392789&ev=PageView&dl=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&rl=https%3A%2F%2Fthenewhealthinstitute.net%2F&if=false&ts=1664409776508&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664409776505.660378066&it=1664409775781&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Thu, 29 Sep 2022 00:02:59 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f457b92cc8ead600e5c297206466eff8
07dc558538848093c071d422f5f0df9885466df1
83bb44907eeb0602b45d29d12c65ffc60ded954d9751078fc958a4494b87fe70
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 00:02:59 GMT
Last-Modified: Wed, 28 Sep 2022 22:24:17 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nkRzclWTna4KkfYYE8mdSfvtepS6eEIXCs1Pa_3PVLnIcfUwUm8V0A==
Age: 5922
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash afa078b70d80b6b5afcd913b9a626159
ccce4ced1c0e2aacb3c9de29c995e69084fdd851
b39fd4ba1a0a96216d68eaddf1ce8dd67c4cceae45f90c29e4b3093300873d08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3499488d099934e02c894c15f11025ed
f0436afc962b71d22959b7607dd9e19ee53b99cb
c1375cff21e4f3c7bf53c8938829342f4901e48ff190080e6995f73c82c06460
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
in.hotjar.com/api/v2/client/sites/1423861/visit-data?sv=6
200 OK 121 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/1423861/visit-data?sv=6
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f15e7e1b231b7677e261cedcc2774f0d
ed7b28a651b8b0bbcf89e1df51e46f79e28aa57d
2fb65c402663a1883dba6215b27623fd27f98144b807750306ab0037c55f4d6c
POST /api/v2/client/sites/1423861/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 130
Origin: https://freedomfromjointpain.com
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:59 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Thu, 29 Sep 2022 00:02:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3499488d099934e02c894c15f11025ed
f0436afc962b71d22959b7607dd9e19ee53b99cb
c1375cff21e4f3c7bf53c8938829342f4901e48ff190080e6995f73c82c06460
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash afa078b70d80b6b5afcd913b9a626159
ccce4ced1c0e2aacb3c9de29c995e69084fdd851
b39fd4ba1a0a96216d68eaddf1ce8dd67c4cceae45f90c29e4b3093300873d08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 29 Sep 2022 00:02:59 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 84b75750feb6a3de46e8d868ff139fcc
83ac58511aff423c6429f4f6cae3aab40a3d836a
1b228422a7374469bad2073c7b8340bd99d91ab0ba304d631126eb6354da5a82
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 29 Sep 2022 00:02:59 GMT
server: ESF
cache-control: private
content-length: 30827
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 28 kB IP
Hash 1aa370ee2b6d9fee44db3c8564966aa3
8a834649ac446fb8b0ad92292bb14d039a9a1ad7
0eb467a1b867c047eb221d7f4502b9b32150423bd76605e406c3f00d34c0da65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/UNMeoPQ8rtRt9hrMkVLrjVSzaMRKLPVY2pV-dxR9xRk.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/UNMeoPQ8rtRt9hrMkVLrjVSzaMRKLPVY2pV-dxR9xRk.js
IP
File type ASCII text, with very long lines (36059)
Hash 653ca66c61b84cbd83869ee18f017d75
90a6545ff9e57c4b7aead2902a6b490020062f8d
9a2bb3e8ba9e5b19e7d5ceef273a3ef848af3472f0e779f6764037e78dfdccea
GET /js/th/UNMeoPQ8rtRt9hrMkVLrjVSzaMRKLPVY2pV-dxR9xRk.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14218
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 05:09:23 GMT
expires: Thu, 28 Sep 2023 05:09:23 GMT
cache-control: public, max-age=31536000
age: 68016
last-modified: Tue, 13 Sep 2022 11:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 60862e3cfa179f3df2b96a58912f6787
ff537827cbde6445205715d36d3ae25fa1d6430f
8d359daecf4a7e4b1816e03d675e0f87ad87f729d9f1c9d0d7ef3598a2cbdf08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/ytc/AMLnZu-vcx524WirtTVGLiqUQeB_Egv4bbdKjey8m3X1=s68-c-k-c0x00ffffff-no-rj
200 OK 1.9 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu-vcx524WirtTVGLiqUQeB_Egv4bbdKjey8m3X1=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 6e17d5a956e8d6fb8f2828639a152691
ca4c4c3a4bcbc10d29b213bd5302dbc0d4ad3a90
d5c741dfb91d5bf68f60d95e096b5c169eb9bed03007cb4e7fbc0cf2714b9085
GET /ytc/AMLnZu-vcx524WirtTVGLiqUQeB_Egv4bbdKjey8m3X1=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1925
x-xss-protection: 0
date: Thu, 29 Sep 2022 00:02:59 GMT
expires: Sun, 31 Jul 2022 18:22:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v10"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 60862e3cfa179f3df2b96a58912f6787
ff537827cbde6445205715d36d3ae25fa1d6430f
8d359daecf4a7e4b1816e03d675e0f87ad87f729d9f1c9d0d7ef3598a2cbdf08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64efebb51e5b4f12f97825c5944d0cfa
fc6830187fd786f3d7fefeda96bf0fbe15509927
a33a76aa921357b856b0f68c84f500cd12c40cce3172723b8cd77c250422ac43
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-156185630-1&cid=2032563015.1664409776&jid=741541917&_u=YGBACEAABAAAAC~&z=196579933
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-156185630-1&cid=2032563015.1664409776&jid=741541917&_u=YGBACEAABAAAAC~&z=196579933
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-156185630-1&cid=2032563015.1664409776&jid=741541917&_u=YGBACEAABAAAAC~&z=196579933 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Sep 2022 00:02:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64efebb51e5b4f12f97825c5944d0cfa
fc6830187fd786f3d7fefeda96bf0fbe15509927
a33a76aa921357b856b0f68c84f500cd12c40cce3172723b8cd77c250422ac43
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6e67a273cf654ce424c0e887c404a926
9570d52f9eabad77312b46f4d8bb5c3cb27d3c6f
2a0296addab707b4c7835cf4392e656714a320264f6102f0e6cb9bdfc7fce857
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6e67a273cf654ce424c0e887c404a926
9570d52f9eabad77312b46f4d8bb5c3cb27d3c6f
2a0296addab707b4c7835cf4392e656714a320264f6102f0e6cb9bdfc7fce857
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=0W&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenes&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=69315022&dur=3010.800&lmt=1655438557002519&mt=1664408858&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhAI6LA3UcvaDxSAPi_sAi_NfLTW-2sIxS8WEh5qu2bI-FAiEAjwgi-8gXfk_obmEPzEJ0GFWK-TRVbFs1XxApwZ-2E4c%3D&alr=yes&sig=AOq0QJ8wRAIgf9Qpg6Ni5qZ27k-t3IujaJh4r5MMNtq2xNREUUO5UP8CICr3tM9bo6I393399WhxEvhu3NN_s-omqo2YSUOdixdw&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&range=0-130186&rn=1&rbuf=0
200 OK 1.1 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=0W&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenes&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=69315022&dur=3010.800&lmt=1655438557002519&mt=1664408858&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhAI6LA3UcvaDxSAPi_sAi_NfLTW-2sIxS8WEh5qu2bI-FAiEAjwgi-8gXfk_obmEPzEJ0GFWK-TRVbFs1XxApwZ-2E4c%3D&alr=yes&sig=AOq0QJ8wRAIgf9Qpg6Ni5qZ27k-t3IujaJh4r5MMNtq2xNREUUO5UP8CICr3tM9bo6I393399WhxEvhu3NN_s-omqo2YSUOdixdw&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&range=0-130186&rn=1&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with very long lines (1105), with no line terminators
Hash ee6ba1348a737961804356abe4aa2644
7b45c1e3ff5c5c8d0f45c6540ff1507512a91210
9f425ad0e5538f1b5d72f825776b114d27bed66ca9b502e1515199a858f601fe
GET /videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=0W&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenes&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=69315022&dur=3010.800&lmt=1655438557002519&mt=1664408858&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRgIhAI6LA3UcvaDxSAPi_sAi_NfLTW-2sIxS8WEh5qu2bI-FAiEAjwgi-8gXfk_obmEPzEJ0GFWK-TRVbFs1XxApwZ-2E4c%3D&alr=yes&sig=AOq0QJ8wRAIgf9Qpg6Ni5qZ27k-t3IujaJh4r5MMNtq2xNREUUO5UP8CICr3tM9bo6I393399WhxEvhu3NN_s-omqo2YSUOdixdw&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&range=0-130186&rn=1&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Thu, 29 Sep 2022 00:02:59 GMT
Expires: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1105
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=251&source=youtube&requiressl=yes&mh=0W&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenes&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=audio%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=52935858&dur=3010.841&lmt=1655436032873546&mt=1664408858&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4432434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRAIgEbz_cg1dl6kMvceiy8ALqudWJGXKJAbeLoXlhXU8UlwCIGG0pNWi64dt9reTKaPX_ZwSDoczBnIGAIuLhFfOr4XX&alr=yes&sig=AOq0QJ8wRQIgVLTczZpMCE50G_ucFeWIR_2vRsxxX23I_2oZsggEHrkCIQCVqoeP5dIIGU009vGpATGbvZzFElm2ETIFKwumtHNr8Q%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&range=0-71136&rn=2&rbuf=0
200 OK 1.0 kB URL HTTP/1.1 rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=251&source=youtube&requiressl=yes&mh=0W&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenes&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=audio%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=52935858&dur=3010.841&lmt=1655436032873546&mt=1664408858&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4432434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRAIgEbz_cg1dl6kMvceiy8ALqudWJGXKJAbeLoXlhXU8UlwCIGG0pNWi64dt9reTKaPX_ZwSDoczBnIGAIuLhFfOr4XX&alr=yes&sig=AOq0QJ8wRQIgVLTczZpMCE50G_ucFeWIR_2vRsxxX23I_2oZsggEHrkCIQCVqoeP5dIIGU009vGpATGbvZzFElm2ETIFKwumtHNr8Q%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&range=0-71136&rn=2&rbuf=0
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with very long lines (1034), with no line terminators
Hash 71a0b15c44a0cdd204ef5d8278d75c2d
626f0bdb5ad494729cc83a8fe00974dd294678bf
0afd22f368fdcb26b6ee25cda2c1722b83fe4afaa902c13a5bc79d81b93cb27b
GET /videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=251&source=youtube&requiressl=yes&mh=0W&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenes&ms=au%2Crdu&mv=u&mvi=1&pl=21&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=audio%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=52935858&dur=3010.841&lmt=1655436032873546&mt=1664408858&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=4432434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AG3C_xAwRAIgEbz_cg1dl6kMvceiy8ALqudWJGXKJAbeLoXlhXU8UlwCIGG0pNWi64dt9reTKaPX_ZwSDoczBnIGAIuLhFfOr4XX&alr=yes&sig=AOq0QJ8wRQIgVLTczZpMCE50G_ucFeWIR_2vRsxxX23I_2oZsggEHrkCIQCVqoeP5dIIGU009vGpATGbvZzFElm2ETIFKwumtHNr8Q%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&range=0-71136&rn=2&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Thu, 29 Sep 2022 00:02:59 GMT
Expires: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 1034
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6e67a273cf654ce424c0e887c404a926
9570d52f9eabad77312b46f4d8bb5c3cb27d3c6f
2a0296addab707b4c7835cf4392e656714a320264f6102f0e6cb9bdfc7fce857
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 01ef80f37d0fde22def99efdcc772bb7
cefdedbe92b84c3e964d7b6babea513b96697b56
5e9fad4127c2635746772004a939504cc3f2e26d17efb6e58af49eea268db9e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d17b625d75d4a7c9dc197b01b2b27720
8aee076fa0829f4e1b5c6602ca05b7289dfb7c0e
eeb9572123bb12af94cbf04a54413aeedb902bc8c2f89a333a3d22accb077c10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rr1---sn-5goeenes.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=251&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=audio%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=52935858&dur=3010.841&lmt=1655436032873546&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4432434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRQIgVLTczZpMCE50G_ucFeWIR_2vRsxxX23I_2oZsggEHrkCIQCVqoeP5dIIGU009vGpATGbvZzFElm2ETIFKwumtHNr8Q%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAM8cZHXXr3d6WxH68gDsb8gRqseF5wRhxNsnepo_nJosAiBrVIBz6aRIWA4hwyAsisAOSZ26u-oLibic-zlQPDUxpw%3D%3D&range=0-71136&rn=3&rbuf=0
200 OK 71 kB URL HTTP/1.1 rr1---sn-5goeenes.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=251&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=audio%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=52935858&dur=3010.841&lmt=1655436032873546&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4432434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRQIgVLTczZpMCE50G_ucFeWIR_2vRsxxX23I_2oZsggEHrkCIQCVqoeP5dIIGU009vGpATGbvZzFElm2ETIFKwumtHNr8Q%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAM8cZHXXr3d6WxH68gDsb8gRqseF5wRhxNsnepo_nJosAiBrVIBz6aRIWA4hwyAsisAOSZ26u-oLibic-zlQPDUxpw%3D%3D&range=0-71136&rn=3&rbuf=0
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 36ecfa4d65dfd3fedcb3eaf4db66f3c4
54295b459d96fd04eee6ac9bdfea332a285b3659
775c0a429354d1b15f846e6060a1ec3d04c428514e6e77e8d9397d83c522e09e
GET /videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=251&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=audio%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=52935858&dur=3010.841&lmt=1655436032873546&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4432434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRQIgVLTczZpMCE50G_ucFeWIR_2vRsxxX23I_2oZsggEHrkCIQCVqoeP5dIIGU009vGpATGbvZzFElm2ETIFKwumtHNr8Q%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAM8cZHXXr3d6WxH68gDsb8gRqseF5wRhxNsnepo_nJosAiBrVIBz6aRIWA4hwyAsisAOSZ26u-oLibic-zlQPDUxpw%3D%3D&range=0-71136&rn=3&rbuf=0 HTTP/1.1
Host: rr1---sn-5goeenes.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 17 Jun 2022 03:20:32 GMT
Content-Type: audio/webm
Date: Thu, 29 Sep 2022 00:02:59 GMT
Expires: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 71137
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
rr1---sn-5goeenes.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=69315022&dur=3010.800&lmt=1655438557002519&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgf9Qpg6Ni5qZ27k-t3IujaJh4r5MMNtq2xNREUUO5UP8CICr3tM9bo6I393399WhxEvhu3NN_s-omqo2YSUOdixdw&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAKDol5a06_rt4yS8weexoXWpgCdaIe0oKFn8_rpvRstmAiA6Q3f4U2PMgvvmJL467eYjvogtPbx92yUx6GkBWPdfFQ%3D%3D&range=0-130186&rn=4&rbuf=0
200 OK 130 kB URL HTTP/1.1 rr1---sn-5goeenes.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=69315022&dur=3010.800&lmt=1655438557002519&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgf9Qpg6Ni5qZ27k-t3IujaJh4r5MMNtq2xNREUUO5UP8CICr3tM9bo6I393399WhxEvhu3NN_s-omqo2YSUOdixdw&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAKDol5a06_rt4yS8weexoXWpgCdaIe0oKFn8_rpvRstmAiA6Q3f4U2PMgvvmJL467eYjvogtPbx92yUx6GkBWPdfFQ%3D%3D&range=0-130186&rn=4&rbuf=0
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Size 130 kB (130187 bytes)
Hash a26ad6cca8fb2f4fccd88fa562c4d785
f830ae66aa8910d970f5170f61ff001a82022687
11c5ceff87a05e5ddeabd523df2414e9cff7ee8b07eef2271a72e114d60a38bc
GET /videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=243&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=69315022&dur=3010.800&lmt=1655438557002519&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRAIgf9Qpg6Ni5qZ27k-t3IujaJh4r5MMNtq2xNREUUO5UP8CICr3tM9bo6I393399WhxEvhu3NN_s-omqo2YSUOdixdw&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAKDol5a06_rt4yS8weexoXWpgCdaIe0oKFn8_rpvRstmAiA6Q3f4U2PMgvvmJL467eYjvogtPbx92yUx6GkBWPdfFQ%3D%3D&range=0-130186&rn=4&rbuf=0 HTTP/1.1
Host: rr1---sn-5goeenes.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 17 Jun 2022 04:02:37 GMT
Content-Type: video/webm
Date: Thu, 29 Sep 2022 00:02:59 GMT
Expires: Thu, 29 Sep 2022 00:02:59 GMT
Cache-Control: private, max-age=21300
Accept-Ranges: bytes
Content-Length: 130187
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 29 Sep 2022 00:03:00 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 01ef80f37d0fde22def99efdcc772bb7
cefdedbe92b84c3e964d7b6babea513b96697b56
5e9fad4127c2635746772004a939504cc3f2e26d17efb6e58af49eea268db9e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 00:03:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 920aefaef632c5815cc1b38cdceff6d1
dea7c0e0b310d4f7b50eaf6cb52abcb9569f8fa7
f5e76604115ae54f7989d940faa41945ae674557fe0f5ba474576dc468b02b84
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 864
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 29 Sep 2022 00:03:00 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rr1---sn-5goeenes.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=103172648&dur=3010.800&lmt=1655439386153128&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRQIhAOdJAXqotrRIfG7ObHF9-s8B9iP3b2Kssf6yNMxQPaxDAiBoT0KUOALOPZdxyXfCa6b9d_Ud2KDAdrrj8o5bF11y4w%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgYdpUPXFQ6LCbDmpYEMGNJeUvDyHRN4T0MFLwpqTBsy4CIQCgwF4EiWhEqyg5TNOpxFPUwGuGwKRFrYaFshEZk6ZvhA%3D%3D&range=0-10613&rn=6&rbuf=0
200 OK 11 kB URL HTTP/1.1 rr1---sn-5goeenes.googlevideo.com/videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=103172648&dur=3010.800&lmt=1655439386153128&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRQIhAOdJAXqotrRIfG7ObHF9-s8B9iP3b2Kssf6yNMxQPaxDAiBoT0KUOALOPZdxyXfCa6b9d_Ud2KDAdrrj8o5bF11y4w%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgYdpUPXFQ6LCbDmpYEMGNJeUvDyHRN4T0MFLwpqTBsy4CIQCgwF4EiWhEqyg5TNOpxFPUwGuGwKRFrYaFshEZk6ZvhA%3D%3D&range=0-10613&rn=6&rbuf=0
IP
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 0535186bbc7ad1794ee637b53449af74
5adb44f893ba59d7bef52c933e0c7e52a0868d50
e8b6c3c355566c0b0012fbbadc80bd4c7431e1cbd21ade91c393296ea922e2b5
GET /videoplayback?expire=1664431379&ei=s-A0Y7anHIyG0u8P27-pSA&ip=91.90.42.154&id=o-AP8OeHqTnmPV7azMkQZmMUdHS-EA34bqP25mD51QB87j&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=yR2vp2LmdHbLF0HzQNEqEax1jkAVWrk&vprv=1&mime=video%2Fwebm&ns=q8V_X28vPVEA1TPzLDD8WUwI&gir=yes&clen=103172648&dur=3010.800&lmt=1655439386153128&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=4437434&n=_VxWF6_Py4sD5Q&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&alr=yes&sig=AOq0QJ8wRQIhAOdJAXqotrRIfG7ObHF9-s8B9iP3b2Kssf6yNMxQPaxDAiBoT0KUOALOPZdxyXfCa6b9d_Ud2KDAdrrj8o5bF11y4w%3D%3D&cpn=w2m3TLCLwLiRlsLE&cver=1.20220927.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=0W&mm=29&mn=sn-5goeenes&ms=rdu&mt=1664408593&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgYdpUPXFQ6LCbDmpYEMGNJeUvDyHRN4T0MFLwpqTBsy4CIQCgwF4EiWhEqyg5TNOpxFPUwGuGwKRFrYaFshEZk6ZvhA%3D%3D&range=0-10613&rn=6&rbuf=0 HTTP/1.1
Host: rr1---sn-5goeenes.googlevideo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 17 Jun 2022 04:16:26 GMT
Content-Type: video/webm
Date: Thu, 29 Sep 2022 00:03:00 GMT
Expires: Thu, 29 Sep 2022 00:03:00 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 10614
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=1561&scd=82&ssd=1&est=1664409775924&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1664409777486&vi=1664409775922&ri=6681087aaf4aaf622086f76f8e5a511d&ref=https%3A%2F%2Fthenewhealthinstitute.net%2F&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=1561&scd=82&ssd=1&est=1664409775924&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1664409777486&vi=1664409775922&ri=6681087aaf4aaf622086f76f8e5a511d&ref=https%3A%2F%2Fthenewhealthinstitute.net%2F&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1270828/log/3/unip?en=pre_d_eng_tb&tos=1561&scd=82&ssd=1&est=1664409775924&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1664409777486&vi=1664409775922&ri=6681087aaf4aaf622086f76f8e5a511d&ref=https%3A%2F%2Fthenewhealthinstitute.net%2F&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedomfromjointpain.com
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 29 Sep 2022 00:03:00 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://freedomfromjointpain.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=82&ssd=1&est=1664409775924&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1664409780488&vi=1664409775922&ri=6681087aaf4aaf622086f76f8e5a511d&ref=https%3A%2F%2Fthenewhealthinstitute.net%2F&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&ler=other
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1270828/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=82&ssd=1&est=1664409775924&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1664409780488&vi=1664409775922&ri=6681087aaf4aaf622086f76f8e5a511d&ref=https%3A%2F%2Fthenewhealthinstitute.net%2F&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&ler=other
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1270828/log/3/unip?en=pre_d_eng_tb&tos=4564&scd=82&ssd=1&est=1664409775924&ver=35&isls=true&src=i&invt=3000&rv=1&tim=1664409780488&vi=1664409775922&ri=6681087aaf4aaf622086f76f8e5a511d&ref=https%3A%2F%2Fthenewhealthinstitute.net%2F&cv=20220922-16-RELEASE&item-url=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freedomfromjointpain.com
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 29 Sep 2022 00:03:03 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://freedomfromjointpain.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
dev.visualwebsiteoptimizer.com/j.php?a=231917&u=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&f=1&r=0.8130576188499382
200 OK 0 B URL HTTP/2 dev.visualwebsiteoptimizer.com/j.php?a=231917&u=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&f=1&r=0.8130576188499382
IP
GET /j.php?a=231917&u=https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103&f=1&r=0.8130576188499382 HTTP/1.1
Host: dev.visualwebsiteoptimizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: public, max-age=0, no-cache, must-revalidate
etag: W/"1664366423"
server: gams1
timing-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Barlow+Condensed
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Barlow+Condensed
IP
GET /css?family=Barlow+Condensed HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 00:02:57 GMT
date: Thu, 29 Sep 2022 00:02:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Permanent+Marker
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Permanent+Marker
IP
GET /css?family=Permanent+Marker HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 00:02:57 GMT
date: Thu, 29 Sep 2022 00:02:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,600
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,600
IP
GET /css?family=Montserrat:400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 00:02:57 GMT
date: Thu, 29 Sep 2022 00:02:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap-theme.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap-theme.min.css
IP
GET /bootstrap/3.3.6/css/bootstrap-theme.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 2021-06-08 21:24:19
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: cf44c48c8efbdecea812f46603abec5a
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 9853458
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 752073f55a3cb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/css/uikit_zenith_sites.css
200 OK 0 B URL HTTP/2 d39ldsmboekjvi.cloudfront.net/css/uikit_zenith_sites.css
IP
GET /css/uikit_zenith_sites.css HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 22 Feb 2022 03:17:17 GMT
x-amz-version-id: UfzQIDZH5r9R9X9gOxYnRaIGySpcRRBZ
server: AmazonS3
content-encoding: gzip
date: Wed, 28 Sep 2022 08:51:53 GMT
etag: W/"a4dc43ded5b1196e2ccac97b633ad2eb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZlT5kFKEjtGfDZcZguoES45YJhDYRpT1rLBh42lv-GF6mCC81C5wsw==
age: 54665
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald:400,500,600,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald:400,500,600,700
IP
GET /css?family=Oswald:400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 00:02:57 GMT
date: Thu, 29 Sep 2022 00:02:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
IP
GET /bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 00:02:57 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 11/05/2021 16:36:29
cdn-edgestorageid: 722
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.0
cdn-requestid: bfa40aed2fbee600eecd4f43bc8c0656
cdn-cache: HIT
cf-cache-status: HIT
age: 9853921
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 752073f56a48b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
trc.taboola.com/1270828/trc/3/json?tim=1664409775930&data=%7B%22id%22%3A174%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1664409775922%2C%22cv%22%3A%2220220922-16-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22e%22%3A%22https%3A%2F%2Fthenewhealthinstitute.net%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1664409775929%2C%22ref%22%3A%22https%3A%2F%2Fthenewhealthinstitute.net%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22tos%22%3A5%2C%22ssd%22%3A1%2C%22scd%22%3A82%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1270828/trc/3/json?tim=1664409775930&data=%7B%22id%22%3A174%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1664409775922%2C%22cv%22%3A%2220220922-16-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22e%22%3A%22https%3A%2F%2Fthenewhealthinstitute.net%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1664409775929%2C%22ref%22%3A%22https%3A%2F%2Fthenewhealthinstitute.net%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22tos%22%3A5%2C%22ssd%22%3A1%2C%22scd%22%3A82%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1270828/trc/3/json?tim=1664409775930&data=%7B%22id%22%3A174%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1664409775922%2C%22cv%22%3A%2220220922-16-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22e%22%3A%22https%3A%2F%2Fthenewhealthinstitute.net%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dzenithlabs-network%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1664409775929%2C%22ref%22%3A%22https%3A%2F%2Fthenewhealthinstitute.net%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Ffreedomfromjointpain.com%2F%3Ftid%3D1026a4f6aece465e230f05782da08a%26aff_id%3D1987%26sub%3DawbPromo103%22%2C%22tos%22%3A5%2C%22ssd%22%3A1%2C%22scd%22%3A82%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 29 Sep 2022 00:02:58 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664409779.627294,VS0,VE87
vary: Accept-Encoding
x-vcl-time-ms: 87
X-Firefox-Spdy: h2
d39ldsmboekjvi.cloudfront.net/js/global.js
200 OK 0 B URL HTTP/2 d39ldsmboekjvi.cloudfront.net/js/global.js
IP
GET /js/global.js HTTP/1.1
Host: d39ldsmboekjvi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 28 Sep 2022 04:48:32 GMT
last-modified: Wed, 04 Mar 2020 20:38:43 GMT
etag: W/"0a1b6db2892f7f2acd5fef15f9fe3468"
x-amz-version-id: bmHLfsPez_HWSYfR3Krj0Af.V9ixTXJx
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HV1dae_Dlfuux9jCAgl5ZdCmo3GrqqRlc5SeOtVtf47_dd2LHWC4KQ==
age: 69266
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Anton|Lato|Oswald:400,500,600,700|Lora:400,400i,700,700i|Titillium+Web:900|Wendy+One
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Anton|Lato|Oswald:400,500,600,700|Lora:400,400i,700,700i|Titillium+Web:900|Wendy+One
IP
GET /css?family=Anton|Lato|Oswald:400,500,600,700|Lora:400,400i,700,700i|Titillium+Web:900|Wendy+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d39ldsmboekjvi.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 00:02:57 GMT
date: Thu, 29 Sep 2022 00:02:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1423861.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-1423861.js?sv=6
IP
GET /c/hotjar-1423861.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 29 Sep 2022 00:02:58 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/185e79414b867283bd7d8cef762eb4eb
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zKBeQbTeN7OppSgixteRS7Y3Az28SY30-CbvUyYY6d0kORXl4zWckA==
X-Firefox-Spdy: h2
www.youtube.com/iframe_api
200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freedomfromjointpain.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Thu, 29 Sep 2022 00:02:58 GMT
date: Thu, 29 Sep 2022 00:02:58 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=KY6_2P196aY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=XYdLwTlwTqw; Domain=.youtube.com; Expires=Tue, 28-Mar-2023 00:02:58 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+889; expires=Sat, 28-Sep-2024 00:02:58 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
145.14.146.59
142.250.74.10
104.18.11.207
31.13.72.12
23.38.201.81
95.217.204.32
93.184.220.29
34.251.196.147